<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40">
<head>
<meta http-equiv=Content-Type content="text/html; charset=utf-8">
<meta name=Generator content="Microsoft Word 12 (filtered medium)">
<style>
<!--
/* Font Definitions */
@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
@font-face
{font-family:Tahoma;
panose-1:2 11 6 4 3 5 4 4 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0in;
margin-bottom:.0001pt;
font-size:12.0pt;
font-family:"Times New Roman","serif";}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:blue;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{mso-style-priority:99;
color:purple;
text-decoration:underline;}
span.apple-style-span
{mso-style-name:apple-style-span;}
span.msoins0
{mso-style-name:msoins;}
span.EmailStyle19
{mso-style-type:personal-reply;
font-family:"Calibri","sans-serif";
color:#1F497D;}
span.msoIns
{mso-style-type:export-only;
mso-style-name:"";
text-decoration:underline;
color:teal;}
.MsoChpDefault
{mso-style-type:export-only;}
@page Section1
{size:8.5in 11.0in;
margin:1.0in 1.0in 1.0in 1.0in;}
div.Section1
{page:Section1;}
-->
</style>
<!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]-->
</head>
<body lang=EN-US link=blue vlink=purple>
<div class=Section1>
<p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";
color:#1F497D'>I’ve sent a note to David Daggett, the lawyer who drafted our
IPR documents, asking about this.<o:p></o:p></span></p>
<p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";
color:#1F497D'><o:p> </o:p></span></p>
<p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";
color:#1F497D'> Cheers,<o:p></o:p></span></p>
<p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";
color:#1F497D'> --
Mike<o:p></o:p></span></p>
<p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";
color:#1F497D'><o:p> </o:p></span></p>
<div style='border:none;border-top:solid #B5C4DF 1.0pt;padding:3.0pt 0in 0in 0in'>
<p class=MsoNormal><b><span style='font-size:10.0pt;font-family:"Tahoma","sans-serif"'>From:</span></b><span
style='font-size:10.0pt;font-family:"Tahoma","sans-serif"'> Nat Sakimura
[mailto:sakimura@gmail.com] <br>
<b>Sent:</b> Monday, April 28, 2008 5:40 AM<br>
<b>To:</b> board@openid.net<br>
<b>Cc:</b> Mike Jones<br>
<b>Subject:</b> Re: [OpenID board] Plain-English writeup of IPR process<o:p></o:p></span></p>
</div>
<p class=MsoNormal><o:p> </o:p></p>
<p class=MsoNormal><span class=apple-style-span><b><span style='color:#3366FF'>Here
is the proposed addition that I sent. </span></b></span><o:p></o:p></p>
<div>
<p class=MsoNormal><o:p> </o:p></p>
</div>
<div>
<p class=MsoNormal><span class=apple-style-span><b><i><span style='font-size:
18.0pt'>Before addition: </span></i></b></span><o:p></o:p></p>
</div>
<div>
<p class=MsoNormal><o:p> </o:p></p>
</div>
<div>
<p class=MsoNormal>Contributor ("<b>I</b>" or "<b>me</b>")
hereby irrevocably promises not to assert any Necessary Claims against any
other entity ("<b>you</b>") for making, using, selling, offering for
sale, importing, or distributing any Implementation or offering any product or
service to the extent it contains or uses a Compliant Portion subject to
the following. This is a personal promise directly from me to you, and you
acknowledge as a condition of benefiting from it that no rights from me are
received from me for your suppliers, distributors, or otherwise in connection
with this promise.<o:p></o:p></p>
</div>
<div>
<p class=MsoNormal><o:p> </o:p></p>
</div>
<div>
<p class=MsoNormal><span class=apple-style-span><b><i><span style='font-size:
18.0pt'>After addition: </span></i></b></span><o:p></o:p></p>
</div>
<div>
<p class=MsoNormal><o:p> </o:p></p>
</div>
<div>
<p class=MsoNormal><span class=apple-style-span>Contributor ("<b>I</b>"
or "<b>me</b>") hereby irrevocably promises not to assert any
Necessary Claims against any other entity ("<b>you</b>") for making,
using, selling, offering for sale, importing, or distributing any
Implementation or offering any product or service to the extent it contains or
uses a Compliant Portion</span><span class=msoins0><span style='color:red'><span
class=msoIns><ins cite="mailto:nriuser" datetime="2008-04-02T18:38"> provided
that such Compliant Portion</ins></span><span class=msoIns><ins
cite="mailto:nriuser" datetime="2008-04-02T18:39">s</ins></span><span
class=msoIns><ins cite="mailto:nriuser" datetime="2008-04-02T18:38"> </ins></span><span
class=msoIns><ins cite="mailto:nriuser" datetime="2008-04-02T18:39">are
compliant with all relevant portions of Implementers Draft</ins></span><span
class=msoIns><ins cite="mailto:nriuser" datetime="2008-04-02T18:40">s</ins></span><span
class=msoIns><ins cite="mailto:nriuser" datetime="2008-04-02T18:39"> or Final
Specifications </ins></span><span class=msoIns><ins cite="mailto:nriuser"
datetime="2008-04-02T18:37">created</ins></span><span class=msoIns><ins
cite="mailto:nriuser" datetime="2008-04-02T18:36"> by the Working Groups </ins></span><span
class=msoIns><ins cite="mailto:nriuser" datetime="2008-04-02T18:40">in which </ins></span><span
class=msoIns><ins cite="mailto:nriuser" datetime="2008-04-02T18:36">Contributor
is joining</ins></span></span></span><span class=apple-style-span><span
style='color:red'>,</span> subject to the following. This is a personal promise
directly from me to you, and you acknowledge as a condition of benefiting from
it that no rights from me are received from me for your suppliers,
distributors, or otherwise in connection with this promise.</span><o:p></o:p></p>
</div>
<div>
<p class=MsoNormal><o:p> </o:p></p>
</div>
<div>
<p class=MsoNormal><span class=apple-style-span><b><span style='font-family:
"Arial","sans-serif";color:#3333FF'>I appreciate very much of your response to
it</span></b></span><span class=apple-style-span><b><span style='font-family:
"Arial","sans-serif"'>.</span></b></span><span class=apple-style-span><span
style='font-family:"Arial","sans-serif"'> </span></span><o:p></o:p></p>
</div>
<div>
<p class=MsoNormal><o:p> </o:p></p>
</div>
<div>
<p class=MsoNormal style='margin-bottom:12.0pt'><span class=apple-style-span>=nat</span><o:p></o:p></p>
<div>
<p class=MsoNormal>On Mon, Apr 28, 2008 at 1:11 PM, Nat Sakimura <<a
href="mailto:n-sakimura@nri.co.jp">n-sakimura@nri.co.jp</a>> wrote:<o:p></o:p></p>
<p class=MsoNormal>Thanks Mike.<br>
<br>
Actually, there is only one point in the IPR contribution agreement that<br>
is making my process on halt. After a careful study, to me, it became<br>
apparent that the non-assertion is only for the WGs that we join, but my<br>
legal dept. wants it clarified explicitly by adding such a sentence. (I<br>
have sent their draft couple of weeks ago to Bill.)<br>
<span style='color:#888888'><br>
=nat</span><o:p></o:p></p>
<div>
<div>
<p class=MsoNormal><br>
Mike Jones wrote:<br>
<br>
> I'll be glad to have you on board! All you'll have to do is have NRI
submit the IPR contribution agreement once the working group is approved (and
join OIDF if you haven't yet) and then you'll be a member of the working group.<br>
><br>
> If there are specific questions about IPR process that you have I'd be
glad to try to answer them for you as one of the authors of the doc.<br>
><br>
>
Best wishes,<br>
>
-- Mike<br>
><br>
> -----Original Message-----<br>
> From: <a href="mailto:board-bounces@openid.net">board-bounces@openid.net</a>
[mailto:<a href="mailto:board-bounces@openid.net">board-bounces@openid.net</a>]
On Behalf Of Nat Sakimura<br>
> Sent: Sunday, April 27, 2008 9:03 PM<br>
> To: <a href="mailto:board@openid.net">board@openid.net</a><br>
> Subject: Re: [OpenID board] Plain-English writeup of IPR process<br>
><br>
> That's great.<br>
><br>
> I actually want to join the PAPE WG as well. Only the issue is that the<br>
> IPR process doc is rather hard to read especially for foreginers and am<br>
> having some trouble with my legal department...<br>
><br>
> =nat<br>
><br>
> Mike Jones wrote:<br>
><br>
>> And I'll commit to chronicling the issues and confusions that arise<br>
>> during the PAPE spec process as input to this doc.<br>
>><br>
>><br>
>><br>
>> As you know, I'm starting the PAPE working group for two reasons (1)
to<br>
>> finish a spec that I believe is important, and also (2) to debug the<br>
>> OpenID specification process. J<br>
>><br>
>><br>
>><br>
>>
Cheers,<br>
>><br>
>>
-- Mike<br>
>><br>
>><br>
>><br>
>>
------------------------------------------------------------------------<br>
>><br>
>> *From:* <a href="mailto:board-bounces@openid.net">board-bounces@openid.net</a>
[mailto:<a href="mailto:board-bounces@openid.net">board-bounces@openid.net</a>]
*On<br>
>> Behalf Of *Bill Washburn<br>
>> *Sent:* Friday, April 25, 2008 11:19 PM<br>
>> *To:* <a href="mailto:board@openid.net">board@openid.net</a><br>
>> *Subject:* Re: [OpenID board] Plain-English writeup of IPR process<br>
>><br>
>><br>
>><br>
>> +1<br>
>><br>
>> Thanks Drummond for asking about this. Obviously it will be
valuable to<br>
>> get this done and I recall the Board expressed the determination to
make<br>
>> this happen in the first part of 2008. I will certainly be the<br>
>> coordinator, editor, facilitator and such.<br>
>><br>
>> cheers,<br>
>> -bill<br>
>><br>
>> ----- Original Message ----<br>
>> From: Drummond Reed <<a href="mailto:drummond.reed@cordance.net">drummond.reed@cordance.net</a>><br>
>> To: <a href="mailto:board@openid.net">board@openid.net</a><br>
>> Sent: Friday, April 25, 2008 10:18:51 PM<br>
>> Subject: [OpenID board] Plain-English writeup of IPR process<br>
>><br>
>> On our <a href="http://openid.net/foundation/intellectual-property/"
target="_blank">http://openid.net/foundation/intellectual-property/</a> page,
it says:<br>
>><br>
>><br>
>><br>
>> "We are committed to
provide "common language" summaries of<br>
>> our legal documents soon and anyone who has an interest in helping
make<br>
>> this happen, please send email to Bill Washburn (<a
href="mailto:bill@oidf.org">bill@oidf.org</a>).<br>
>><br>
>><br>
>><br>
>> In working through the setup of the PAPE working group, we got a clear<br>
>> picture of how badly this is needed. While it's possibly for an
insider<br>
>> like Mike to decode the magic ring to figure out how a working group<br>
>> needs to set up and operate, to an average OpenID developer that wants<br>
>> to propose/pursue a new spec, it would be a huge uphill climb (let
alone<br>
>> someone on the outside looking in just wanting to understand the
OpenID<br>
>> IPR process).<br>
>><br>
>><br>
>><br>
>> After Ben Laurie of Google, one of the proposers of the proposed PAPE<br>
>> working group, pointed this out to Mike and the rest of the proposers,<br>
>> it seemed it would be a good use of resources – and our stewardship of<br>
>> IPR for the OpenID community – to hire a writer to organize our
IPR<br>
>> docs and create a simple, plain-English description of the process
that<br>
>> anyone interested in working group could follow. One thought might be<br>
>> for he/she to do this on the OpenID.net <<a href="http://OpenID.net"
target="_blank">http://OpenID.net</a>> wiki so that<br>
>> we can continue to add notes about best practices and pitfalls to
avoid.<br>
>><br>
>><br>
>><br>
>> What do folks think of this? If there is a sentiment to do it, the
next<br>
>> step might be for Bill to coordinate a requirements list (it should
only<br>
>> be a half-page of bullet points – I'd be happy to help with it), and<br>
>> then get some quotes from qualified writers as Dick did for the<br>
>> marketing work (only this is a much smaller job).<br>
>><br>
>><br>
>><br>
>> Thoughts?<br>
>><br>
>><br>
>><br>
>> =Drummond<br>
>><br>
>><br>
>><br>
>><br>
>><br>
>><br>
>><br>
>> ------------------------------------------------------------------------<br>
>><br>
>> *From:* <a href="mailto:billhwashburn@gmail.com">billhwashburn@gmail.com</a>
[mailto:<a href="mailto:billhwashburn@gmail.com">billhwashburn@gmail.com</a>]
*On<br>
>> Behalf Of *Bill Washburn<br>
>> *Sent:* Friday, April 25, 2008 9:59 AM<br>
>> *To:* Drummond Reed<br>
>> *Subject:* Re: FW: Ben's observation about documentation of the WG
process<br>
>><br>
>> n Thu, Apr 24, 2008 at 9:38 PM, Drummond Reed<br>
>> <<a href="mailto:drummond.reed@cordance.net">drummond.reed@cordance.net</a>
<mailto:<a href="mailto:drummond.reed@cordance.net">drummond.reed@cordance.net</a>>>
wrote:<br>
>><br>
>> Bill,<br>
>><br>
>> One more thought -- Mike and I both thought it be worth hiring a
writer<br>
>> (unless you want to tackle it) to write up a short, plain-English<br>
>> summary of the OpenID IPR process (and a FAQ) and put it on (or link
it<br>
>> prominently to) the <a
href="http://openid.net/foundation/intellectual-property/" target="_blank">http://openid.net/foundation/intellectual-property/</a><br>
>> page so that we all have someplace to point folks to when they ask how<br>
>> it works.<br>
>><br>
>> After all, shepherding OpenID IPR is one of our main jobs.<br>
>><br>
>> Will you add this to the task list? I'm happy to make a motion that
the<br>
>> board authorize a small amount to pay a writer to do this.<br>
>><br>
>> Thanks,<br>
>><br>
>> =Drummond<br>
>><br>
>> -----Original Message-----<br>
>> From: Mike Jones [mailto:<a href="mailto:Michael.Jones@microsoft.com">Michael.Jones@microsoft.com</a><br>
>> <mailto:<a href="mailto:Michael.Jones@microsoft.com">Michael.Jones@microsoft.com</a>>]<br>
>> Sent: Thursday, April 24, 2008 7:50 PM<br>
>> To: Drummond Reed<br>
>> Subject: RE: Ben's observation about documentation of the WG process<br>
>><br>
>> It's at <a href="http://openid.net/ipr/" target="_blank">http://openid.net/ipr/</a>
in the process document there. I don't<br>
>> know why there's not a link to it and the ipr policy doc from the<br>
>> <a href="http://openid.net/foundation/intellectual-property/"
target="_blank">http://openid.net/foundation/intellectual-property/</a> page.
Can you send<br>
>> Bill a note cc'ing the board asking that that be fixed?<br>
>><br>
>>
Thanks,<br>
>>
-- Mike<br>
>><br>
>> -----Original Message-----<br>
>> From: Drummond Reed [mailto:<a href="mailto:drummond.reed@cordance.net">drummond.reed@cordance.net</a><br>
>> <mailto:<a href="mailto:drummond.reed@cordance.net">drummond.reed@cordance.net</a>>]<br>
>> Sent: Thursday, April 24, 2008 7:47 PM<br>
>> To: Mike Jones<br>
>> Subject: Ben's observation about documentation of the WG process<br>
>><br>
>> Mike,<br>
>><br>
>> Just a note that I think Ben's right -- as best I can tell (from what
I<br>
>> looked over), there's no documentation of the OpenID workgroup
process.<br>
>><br>
>> Is this the kind of thing we should ask Bill to do? Or at least to<br>
>> contract out? (This is the kind of thing I know Charles could do for<br>
>> ICF, but Bill has a different skillset...)<br>
>><br>
>> One good writer for the OIDF website would go a loooong ways...<br>
>><br>
>> =Drummond<br>
>><br>
>> -----Original Message-----<br>
>> From: Ben Laurie [mailto:<a href="mailto:benl@google.com">benl@google.com</a>
<mailto:<a href="mailto:benl@google.com">benl@google.com</a>>]<br>
>> Sent: Thursday, April 24, 2008 6:25 PM<br>
>> To: Drummond Reed<br>
>> Cc: David Recordon; Mike Jones; John Bradley; Johnny Bufu; Jonathan<br>
>> Daugherty<br>
>> Subject: Re: Draft note about creation of the OpenID PAPE working
group<br>
>><br>
>> On Thu, Apr 24, 2008 at 8:01 PM, Drummond Reed<br>
>> <<a href="mailto:drummond.reed@cordance.net">drummond.reed@cordance.net</a>
<mailto:<a href="mailto:drummond.reed@cordance.net">drummond.reed@cordance.net</a>>>
wrote:<br>
>> > Yes, Ben, it's documented in the OpenID Foundation IPR docs
at<br>
>> <a href="http://openid.net/foundation/intellectual-property/"
target="_blank">http://openid.net/foundation/intellectual-property/</a>. It
could be better<br>
>> organized, but the OIDF is working on that.<br>
>><br>
>> AFAICS that page does not document the WG process.<br>
>><br>
>> ><br>
>> > =Drummond<br>
>> ><br>
>> ><br>
>> ><br>
>> > > -----Original Message-----<br>
>> > > From: Ben Laurie [mailto:<a
href="mailto:benl@google.com">benl@google.com</a> <mailto:<a
href="mailto:benl@google.com">benl@google.com</a>>]<br>
>> > > Sent: Thursday, April 24, 2008 10:04 AM<br>
>> > > To: David Recordon<br>
>> > > Cc: Mike Jones; Drummond Reed; John Bradley;
Johnny Bufu; Jonathan<br>
>> > > Daugherty<br>
>> > > Subject: Re: Draft note about creation of the
OpenID PAPE working<br>
>> group<br>
>> > ><br>
>> > > On Thu, Apr 24, 2008 at 5:37 PM, David Recordon<br>
>> <<a href="mailto:drecordon@sixapart.com">drecordon@sixapart.com</a>
<mailto:<a href="mailto:drecordon@sixapart.com">drecordon@sixapart.com</a>>><br>
>> > > wrote:<br>
>> > > > You're a part of the Foundation, but Google
will have to choose<br>
>> to join<br>
>> > > the<br>
>> > > > working group.<br>
>> > ><br>
>> > > Err ... ok ... Google chooses to join the working
group.<br>
>> > ><br>
>> > > BTW, is any of this documented anywhere?<br>
>> > ><br>
>> > > ><br>
>> > > ><br>
>> > > ><br>
>> > > > On Apr 24, 2008, at 5:00 AM,
"Ben Laurie" <<a href="mailto:benl@google.com">benl@google.com</a><br>
>> <mailto:<a href="mailto:benl@google.com">benl@google.com</a>>>
wrote:<br>
>> > > ><br>
>> > > ><br>
>> > > > > On Thu, Apr 24, 2008 at 7:51 AM, Mike
Jones<br>
>> > > <<a href="mailto:Michael.Jones@microsoft.com">Michael.Jones@microsoft.com</a>
<mailto:<a href="mailto:Michael.Jones@microsoft.com">Michael.Jones@microsoft.com</a>>><br>
>> > > > wrote:<br>
>> > > > ><br>
>> > > > > ><br>
>> > > > > ><br>
>> > > > > ><br>
>> > > > > ><br>
>> > > > > > Good point about making it clear
what we're asking people to do.<br>
>> > > I've<br>
>> > > > > > already asked them to join OIDF
and to consider joining the<br>
>> working<br>
>> > > > group<br>
>> > > > > > once it's up and running.<br>
>> > > > > ><br>
>> > > > ><br>
>> > > > > Am I already joined by virtue of being
at google?<br>
>> > > > ><br>
>> > > > ><br>
>> > > > > > What I forgot to do was tell them
when and how<br>
>> > > > > > the vote will occur. I
propose to do so by adding this<br>
>> sentence to<br>
>> > > the<br>
>> > > > end<br>
>> > > > > > of the message:<br>
>> > > > > ><br>
>> > > > > ><br>
>> > > > > ><br>
>> > > > > > "After the Specifications
Council has responded to this<br>
>> request to<br>
>> > > > create a<br>
>> > > > > > working group (which must happen
within 15 days) a separate<br>
>> message<br>
>> > > will<br>
>> > > > be<br>
>> > > > > > sent asking those of you who are
OpenID members to vote on the<br>
>> > > working<br>
>> > > > group<br>
>> > > > > > creation, containing instructions
for how to do so."<br>
>> > > > > ><br>
>> > > > > ><br>
>> > > > > ><br>
>> > > > > > Sound good?<br>
>> > > > > ><br>
>> > > > > ><br>
>> > > > > ><br>
>> > > > > >
-- Mike<br>
>> > > > > ><br>
>> > > > > ><br>
>> > > > > ><br>
>> > > > > > ________________________________<br>
>> > > > > ><br>
>> > > > > ><br>
>> > > > > > From: David Recordon [mailto:<a
href="mailto:drecordon@sixapart.com">drecordon@sixapart.com</a><br>
>> <mailto:<a href="mailto:drecordon@sixapart.com">drecordon@sixapart.com</a>>]<br>
>> > > > > > Sent: Wednesday, April 23, 2008
11:41 PM<br>
>> > > > > > To: Mike Jones<br>
>> > > > > > Cc: Ben Laurie; Drummond Reed;
John Bradley; Johnny Bufu;<br>
>> Jonathan<br>
>> > > > > > Daugherty<br>
>> > > > > > Subject: Re: Draft note about
creation of the OpenID PAPE<br>
>> working<br>
>> > > group<br>
>> > > > > ><br>
>> > > > > ><br>
>> > > > > ><br>
>> > > > > ><br>
>> > > > > ><br>
>> > > > > > Looks fine to me. The one
thing I see missing is what we're<br>
>> asking<br>
>> > > > people<br>
>> > > > > > to do. Should we just have
people reply with a +1 and we<br>
>> can deal<br>
>> > > with<br>
>> > > > the<br>
>> > > > > > actual counting of the votes
re:membership orthogonally? I<br>
>> think<br>
>> > > that<br>
>> > > > might<br>
>> > > > > > be the easiest.<br>
>> > > > > ><br>
>> > > > > ><br>
>> > > > > ><br>
>> > > > > ><br>
>> > > > > ><br>
>> > > > > > Thanks,<br>
>> > > > > ><br>
>> > > > > ><br>
>> > > > > > --David<br>
>> > > > > ><br>
>> > > > > ><br>
>> > > > > ><br>
>> > > > > ><br>
>> > > > > ><br>
>> > > > > ><br>
>> > > > > > On Apr 23, 2008, at 8:05 PM, Mike
Jones wrote:<br>
>> > > > > ><br>
>> > > > > ><br>
>> > > > > ><br>
>> > > > > ><br>
>> > > > > ><br>
>> > > > > ><br>
>> > > > > ><br>
>> > > > > ><br>
>> > > > > > Hi folks,<br>
>> > > > > ><br>
>> > > > > ><br>
>> > > > > ><br>
>> > > > > ><br>
>> > > > > ><br>
>> > > > > > To those of you on the to: line
-- thanks for agreeing to<br>
>> serve on<br>
>> > > the<br>
>> > > > PAPE<br>
>> > > > > > working group with me to finish
making the PAPE draft an OpenID<br>
>> > > > > > specification. Below is the
note I propose to send to<br>
>> > > <a href="mailto:specs@openid.net">specs@openid.net</a>
<mailto:<a href="mailto:specs@openid.net">specs@openid.net</a>><br>
>> > > > to<br>
>> > > > > > initiate the creation of the
working group. Please suggest any<br>
>> > > edits<br>
>> > > > you'd<br>
>> > > > > > like or send an ack that you're
OK with it as-is.<br>
>> > > > > ><br>
>> > > > > ><br>
>> > > > > ><br>
>> > > > > ><br>
>> > > > > ><br>
>> > > > > > Johnny and Jonathan, as authors
of the existing PAPE spec,<br>
>> I'd also<br>
>> > > like<br>
>> > > > to<br>
>> > > > > > invite you to join and contribute
to the working group. If you<br>
>> > > would<br>
>> > > > like<br>
>> > > > > > to be listed as proposers of the
working group please let me<br>
>> know<br>
>> > > and<br>
>> > > > I'll<br>
>> > > > > > gladly also add you. And if
any of you would crave the<br>
>> opportunity<br>
>> > > to<br>
>> > > > be an<br>
>> > > > > > editor of the specification I can
add you to that list too.<br>
>> > > > > ><br>
>> > > > > ><br>
>> > > > > ><br>
>> > > > > ><br>
>> > > > > ><br>
>> > > > > ><br>
>> Thanks<br>
>> > > > all,<br>
>> > > > > ><br>
>> > > > > ><br>
>> > > > > >
--<br>
>> > > Mike<br>
>> > > > > ><br>
>> > > > > ><br>
>> > > > > ><br>
>> > > > > ><br>
>> > > > > ><br>
>> > > > > > To: <a
href="mailto:specs@openid.net">specs@openid.net</a> <mailto:<a
href="mailto:specs@openid.net">specs@openid.net</a>><br>
>> > > > > ><br>
>> > > > > ><br>
>> > > > > > Subject: Proposal to create
the PAPE working group<br>
>> > > > > ><br>
>> > > > > ><br>
>> > > > > ><br>
>> > > > > ><br>
>> > > > > ><br>
>> > > > > > In accordance with the OpenID
Foundation IPR policies and<br>
>> procedures<br>
>> > > > this<br>
>> > > > > > note proposes the formation of a
new working group chartered to<br>
>> > > produce<br>
>> > > > an<br>
>> > > > > > OpenID specification. As
per Section 4.1 of the Policies, the<br>
>> > > specifics<br>
>> > > > of<br>
>> > > > > > the proposed working group are:<br>
>> > > > > ><br>
>> > > > > ><br>
>> > > > > ><br>
>> > > > > ><br>
>> > > > > ><br>
>> > > > > > Proposal:<br>
>> > > > > ><br>
>> > > > > ><br>
>> > > > > > (a) Charter.<br>
>> > > > > ><br>
>> > > > > ><br>
>> > > > > >
(i) WG name: Provider Authentication Policy<br>
>> > > Extension<br>
>> > > > > > (PAPE)<br>
>> > > > > ><br>
>> > > > > ><br>
>> > > > > >
(ii) Purpose: Produce a standard OpenID<br>
>> extension to<br>
>> > > the<br>
>> > > > > > OpenID Authentication protocol
that: provides a mechanism<br>
>> by which<br>
>> > > a<br>
>> > > > > > Relying Party can request that
particular authentication<br>
>> policies be<br>
>> > > > applied<br>
>> > > > > > by the OpenID Provider when
authenticating an End User and<br>
>> provides<br>
>> > > a<br>
>> > > > > > mechanism by which an OpenID
Provider may inform a Relying Party<br>
>> > > which<br>
>> > > > > > authentication policies were
used. Thus a Relying Party can<br>
>> request<br>
>> > > that<br>
>> > > > the<br>
>> > > > > > End User authenticate, for
example, using a phishing-resistant<br>
>> > > and/or<br>
>> > > > > > multi-factor authentication
method.<br>
>> > > > > ><br>
>> > > > > ><br>
>> > > > > >
(iii) Scope: Produce a revision of the PAPE
1.0<br>
>> > > Draft 2<br>
>> > > > > > specification that clarifies its
intent, while maintaining<br>
>> > > compatibility<br>
>> > > > for<br>
>> > > > > > existing Draft 2 implementations.
Adding any support for<br>
>> > > communicating<br>
>> > > > > > requests for or the use of
specific authentication methods (as<br>
>> > > opposed<br>
>> > > > to<br>
>> > > > > > authentication policies) is
explicitly out of scope.<br>
>> > > > > ><br>
>> > > > > ><br>
>> > > > > >
(iv) Proposed List of Specifications: Provider<br>
>> > > > > > Authentication Policy Extension
1.0, spec completion<br>
>> expected during<br>
>> > > May<br>
>> > > > > > 2008.<br>
>> > > > > ><br>
>> > > > > ><br>
>> > > > > >
(v) Anticipated audience or users of the work:<br>
>> > > > > > Implementers of OpenID Providers
and Relying Parties –<br>
>> especially<br>
>> > > those<br>
>> > > > > > interested in mitigating the
phishing vulnerabilities of logging<br>
>> > > into<br>
>> > > > OpenID<br>
>> > > > > > providers with passwords.<br>
>> > > > > ><br>
>> > > > > ><br>
>> > > > > >
(vi) Language in which the WG will conduct<br>
>> business:<br>
>> > > > > > English.<br>
>> > > > > ><br>
>> > > > > ><br>
>> > > > > >
(vii) Method of work: E-mail discussions on
the<br>
>> > > working<br>
>> > > > > > group mailing list, working group
conference calls, and<br>
>> possibly a<br>
>> > > > > > face-to-face meeting at the Internet
Identity Workshop.<br>
>> > > > > ><br>
>> > > > > ><br>
>> > > > > >
(viii) Basis for determining when the work of<br>
>> the WG<br>
>> > > is<br>
>> > > > > > completed: Proposed changes
to draft 2 will be evaluated on the<br>
>> > > basis<br>
>> > > > of<br>
>> > > > > > whether they increase or decrease
consensus within the working<br>
>> > > group.<br>
>> > > > The<br>
>> > > > > > work will be completed once it is
apparent that maximal<br>
>> consensus on<br>
>> > > the<br>
>> > > > > > draft has been achieved, consistent
with the purpose and scope.<br>
>> > > > > ><br>
>> > > > > ><br>
>> > > > > > (b) Background Information.<br>
>> > > > > ><br>
>> > > > > ><br>
>> > > > > >
(i) Related work being done in other WGs or<br>
>> > > > organizations:<br>
>> > > > > > (1) Assurance Levels as defined
by the National Institute of<br>
>> > > Standards<br>
>> > > > and<br>
>> > > > > > Technology (NIST) in Special
Publication 800-63 (Burr, W.,<br>
>> Dodson,<br>
>> > > D.,<br>
>> > > > and<br>
>> > > > > > W. Polk, Ed., "Electronic
Authentication Guideline," April<br>
>> 2006.)<br>
>> > > > > > [NIST_SP800‑63]. This
working group is needed to enable<br>
>> > > authentication<br>
>> > > > > > policy statements to be exchanged
by OpenID endpoints. No<br>
>> > > coordination<br>
>> > > > is<br>
>> > > > > > needed with NIST, as the PAPE
specification uses elements of the<br>
>> > > NIST<br>
>> > > > > > specification in the intended
fashion.<br>
>> > > > > ><br>
>> > > > > ><br>
>> > > > > >
(ii) Proposers:<br>
>> > > > > ><br>
>> > > > > ><br>
>> > > > > >
Michael B. Jones,<br>
>> <a href="mailto:mbj@microsoft.com">mbj@microsoft.com</a> <mailto:<a
href="mailto:mbj@microsoft.com">mbj@microsoft.com</a>>,<br>
>> > > > > > Microsoft Corporation<br>
>> > > > > ><br>
>> > > > > ><br>
>> > > > > >
David Recordon,<br>
>> > > <a href="mailto:drecordon@sixapart.com">drecordon@sixapart.com</a>
<mailto:<a href="mailto:drecordon@sixapart.com">drecordon@sixapart.com</a>>,<br>
>> > > > Six<br>
>> > > > > > Apart Corporation<br>
>> > > > > ><br>
>> > > > > ><br>
>> > > > > >
Ben Laurie, <a href="mailto:benl@google.com">benl@google.com</a><br>
>> <mailto:<a href="mailto:benl@google.com">benl@google.com</a>>,
Google<br>
>> > > > > > Corporation<br>
>> > > > > ><br>
>> > > > > ><br>
>> > > > > >
Drummond Reed,<br>
>> > > <a href="mailto:drummond.reed@cordance.net">drummond.reed@cordance.net</a>
<mailto:<a href="mailto:drummond.reed@cordance.net">drummond.reed@cordance.net</a>>,<br>
>> > > > > > Cordance Corporation<br>
>> > > > > ><br>
>> > > > > ><br>
>> > > > > >
John Bradley,<br>
>> <a href="mailto:john.bradley@wingaa.com">john.bradley@wingaa.com</a>
<mailto:<a href="mailto:john.bradley@wingaa.com">john.bradley@wingaa.com</a>>,<br>
>> > > > > > Wingaa Corporation<br>
>> > > > > ><br>
>> > > > > ><br>
>> > > > > > Editors:<br>
>> > > > > ><br>
>> > > > > ><br>
>> > > > > >
Michael B. Jones,<br>
>> <a href="mailto:mbj@microsoft.com">mbj@microsoft.com</a> <mailto:<a
href="mailto:mbj@microsoft.com">mbj@microsoft.com</a>>,<br>
>> > > > > > Microsoft Corporation<br>
>> > > > > ><br>
>> > > > > ><br>
>> > > > > >
David Recordon,<br>
>> > > <a href="mailto:drecordon@sixapart.com">drecordon@sixapart.com</a>
<mailto:<a href="mailto:drecordon@sixapart.com">drecordon@sixapart.com</a>>,<br>
>> > > > Six<br>
>> > > > > > Apart Corporation<br>
>> > > > > ><br>
>> > > > > ><br>
>> > > > > >
(iii) Anticipated Contributions: None.<br>
>> > > > > ><br>
>> > > > > ><br>
>> > > > > ><br>
>> > > > > ><br>
>> > > > > ><br>
>> > > > > > ====<br>
>> > > > > ><br>
>> > > > > ><br>
>> > > > > ><br>
>> > > > > ><br>
>> > > > > ><br>
>> > > > > > (The rest of this note is
informational and not part of the<br>
>> proposal<br>
>> > > to<br>
>> > > > > > create an OpenID working group.)<br>
>> > > > > ><br>
>> > > > > ><br>
>> > > > > ><br>
>> > > > > ><br>
>> > > > > ><br>
>> > > > > > Given that the OpenID
specification procedures call for<br>
>> votes of the<br>
>> > > > > > membership, this would be a good
time for those wanting to<br>
>> influence<br>
>> > > the<br>
>> > > > > > outcome of this specification to
join the OpenID Foundation.<br>
>> You<br>
>> > > can do<br>
>> > > > so<br>
>> > > > > > at <a
href="http://openid.net/foundation/join/" target="_blank">http://openid.net/foundation/join/</a>.
Should you wish to<br>
>> join the<br>
>> > > > working<br>
>> > > > > > group, you will also need to
execute one of the Contribution<br>
>> > > Agreements<br>
>> > > > at<br>
>> > > > > > <a
href="http://openid.net/foundation/intellectual-property/" target="_blank">http://openid.net/foundation/intellectual-property/</a>
once the<br>
>> working<br>
>> > > > group<br>
>> > > > > > formation has been approved by
the membership.<br>
>> > > > > ><br>
>> > > > > ><br>
>> > > > > ><br>
>> > > > > ><br>
>> > > > > ><br>
>> > > > > ><br>
>> > > > ><br>
>> > > ><br>
>> > > ><br>
>> ><br>
>> ><br>
>><br>
>><br>
>><br>
>><br>
>><br>
>><br>
>><br>
><br>
><br>
> _______________________________________________<br>
> board mailing list<br>
> <a href="mailto:board@openid.net">board@openid.net</a><br>
> <a href="http://openid.net/mailman/listinfo/board" target="_blank">http://openid.net/mailman/listinfo/board</a><br>
<br>
<br>
_______________________________________________<br>
board mailing list<br>
<a href="mailto:board@openid.net">board@openid.net</a><br>
<a href="http://openid.net/mailman/listinfo/board" target="_blank">http://openid.net/mailman/listinfo/board</a><o:p></o:p></p>
</div>
</div>
</div>
<p class=MsoNormal><br>
<br clear=all>
<br>
-- <br>
Nat Sakimura (=nat)<br>
<a href="http://www.sakimura.org/en/">http://www.sakimura.org/en/</a> <o:p></o:p></p>
</div>
</div>
</body>
</html>